UNC6240 ShinyHunter SIDEEYE Backdoor C2 Communication over Control Port (Established, Bidirectional Data)
Detects established, bidirectional TCP connections between internal hosts and known infrastructure associated with the SIDEEYE backdoor on specific control and data ports (3333 and 3334).
Suricata
